Photo of Stephen C. Piepgrass

Stephen leads the firm’s Regulatory Investigations, Strategy + Enforcement (RISE) Practice Group. He focuses his practice on enforcement actions, investigations, and litigation. Stephen primarily represents clients engaging with, or being investigated by, state attorneys general and other state or local governmental enforcement bodies, including the CFPB and FTC, as well as clients involved with litigation, with a particular focus on heavily regulated industries. He also has experience advising clients on data and privacy issues, including handling complex investigations into data incidents by state attorneys general other state and federal regulators. Additionally, Stephen provides strategic counsel to Troutman Pepper’s Strategies clients who need assistance with public policy, advocacy, and government relations strategies.

Abbey Thornhill, an associate based in Troutman Pepper’s Richmond office, joined the Federal Trade Commission (FTC) in May 2024 as a general attorney in the Consumer Protection, Division of Enforcement. In her new position, she will monitor compliance with administrative and federal court orders in FTC consumer protection cases across a wide range of consumer protection issues, including advertising, financial practices, data security, high-tech fraud, and telemarketing. Thornhill will be responsible for conducting investigations of possible order violations, filing contempt actions in federal court to enforce injunctions, initiating court actions to obtain civil penalties for administrative order violations, and enforcing a variety of FTC rules.

In the latest episode of Regulatory Oversight, Troutman Pepper attorneys Gene Fishel and Joel Lutz welcome guests Aurelia Lewis and Beth Saunders of Lewis Media Partners to discuss evolving privacy laws and their impact on small to mid-sized businesses. Aurelia, as founder and president, and Beth, as vice-president, highlight their wealth of knowledge and experience guiding companies through effective advertising including media channel planning and buying.

This episode of Regulatory Oversight spotlights a recent episode of The Consumer Finance Podcast, “Navigating Facility Relocation: Legal and Practical Considerations,” featuring David Dove from our Regulatory Investigations, Strategy + Enforcement Practice Group. In this episode, podcast host and Consumer Financial Services Partner Chris Willis converses with David about the legal and practical considerations for businesses planning to relocate a facility to a new state. David shares his insights on the various incentives available at the federal, state, and local levels, including grants, tax incentives, and economic development programs. He emphasizes the importance of strategic planning, regulator engagement, and having experienced legal counsel to ensure businesses maximize their opportunities and navigate potential challenges. The discussion provides valuable insights for businesses considering expansion or relocation.

This article was originally published in American City & County on March 1, 2024.

For years, private companies have struggled to protect the data of consumers against security incidents and cyber-attacks by malicious threat actors. More recently, there has been a growing surge of data breaches impacting the public sector, and local governments face unique challenges in responding to such incidents.

In a recent alert, we reported that California Attorney General (AG) Rob Bonta announced a settlement with DoorDash over allegations that the company violated the California Consumer Privacy Act (CCPA) and the California Online Privacy Protection Act (CalOPPA) by selling consumers’ personal information without providing notice or an opportunity to opt out.

In the latest episode of Regulatory Oversight, Troutman Pepper Partner Judy Jagdmann and Counsel Gene Fishel are joined by Sam Kaplan, assistant general counsel for public policy for Palo Alto Networks. They engage in an insightful conversation revolving around the government response to cyber incidents and the potential role of AI in combating cybersecurity threats.

This article was originally published on February 14, 2024 in Reuters and Westlaw Today. It is republished here with permission.

As we discussed in part three of this series, “Navigating the Complexities of Regulatory Data Incident Investigations,” when an organization is the subject of regulatory data incident investigations, it must navigate a tangled regulatory web. Extricating itself from that web is the ultimate goal. But what form does that take?

In an era where privacy, security, and artificial intelligence are at the forefront of many business operations, staying informed about the latest developments is crucial. Our 2023 Privacy Year in Review is an in-depth analysis of the past year’s significant advancements and challenges in these areas.